MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
nix-execgithub.com/amadejkastelic/nix-execupdated this year
MCP server for secure, sandboxed code execution using Nix Flakes and Bubblewrap
MIT -
mcp-python-exec-sandboxgithub.com/lu-zhengda/mcp-python-exec-sandboxupdated this year
MCP server for sandboxed Python execution — bubblewrap on Linux, Docker on macOS. PEP 723 inline deps, multi-version Python, ephemeral environments.
MIT ★ 1 -
Compiler-grade multi-file security, business-logic & concurrency verifier in Rust. Traces cross-file taint via an O(V+E) Guard-Set Lattice (TS/JS/Go/Python/Rust), proves exploits in a Linux Bubblewrap sandbox, and exposes a stdio MCP server.
Apache-2.0 -
Handyman-MCPgithub.com/kennetchau/Handyman-MCPupdated this year
Stateful AI Agent Infrastructure with Persistent FTS5 Memory and Sandboxed Execution.
MIT ★ 1 -
An MCP browser logged in to one site, contained by a Linux network namespace and an allowlisting proxy
Apache-2.0 -
Enterprise-grade Zero-Leak Secret Defense & Sandbox for Autonomous AI Coding Agents
npm Apache-2.0 -
Connect your AI client to a local project to edit code, run tests, manage dev servers, and drive a browser with a live dashboard.
MIT -
Turn ChatGPT Web Chat, Grok, Claude Code, Codex, Cursor or VS Code into a coding agent for one folder on your machine, sandboxed and logged on a live dashboard. MCP server.
MIT ★ 2 -
Aegis Jail MCP: least-privilege sandbox for AI coding agents and MCP servers. Hides ~/.ssh, secrets and the network, proves the walls hold, finds the minimal permissions. Linux, macOS, Windows. Claude Code plugin + MCP server.
AGPL-3.0 ★ 2 -
One Rust binary that runs sandboxed AI coding agents on Linux under a budget, in two modes: swarm mode runs 1 to 30 Pi agents on one goal, and agent mode is an always-on agent that takes requests from Discord, Slack, GitHub and MCP hosts such as Claude Code. A broker makes every LLM call, so no agent holds an API key.
Apache-2.0 ★ 6